December 2013 - skunkworks - Skunkworks Site

Taskforce to explore 4G spectrum-sharing options
by Moses M.G 15 Dec '13

15 Dec '13

http://mobile.nation.co.ke/business/Taskforce-to-explore-4G-spectrum-sharin…

1 0

set_rcvar
by Eva Kimathi 14 Dec '13

14 Dec '13

Hello all, I have a script that has the following line in it: echo "rcvar=`set_rcvar`" >> /usr/local/etc/rc.d/trytond when I run it i encounter this error /xxxxxxxx/xxxxxxx/ghealthscripts/5: line 27: set_rcvar: command not found The script was designed for freeBSD and I am using Fedora. Also, while digging around I found that rcvar is being (or has already) been killed. Does anyone know of a work-around that I can use? Happy Saturday -- __________________________________________________________________________ Out of clutter, find simplicity. From discord, find harmony. In the middle of difficulty, lies opportunity ~Albert Einstein Eva Kimathi

1 0

Cisco configuration - Failover for outbout (Internet) traffic
by Odhiambo Washington 14 Dec '13

14 Dec '13

Hello Cisco gurus, I need a third eye here. I am configuring a Cisco 1841 so that I can get failover for outbout (Internet) traffic when ISP link goes down. I decided to base my config on route-maps. I have installed a 3G card, and configured it to work with Safaricom. For some very strange reason (hence the third eye need) the automatic failover doesn't appear to work correctly. When I unplug the other ISP's cable, I can go out via 3G though. I am doubting my routes configuration, but I am not sure this is it: p route 0.0.0.0 0.0.0.0 JTL-GW-IP ip route 0.0.0.0 0.0.0.0 Cellular0/0/0 10 " Having looked at safaricom's 3G IP assignments, I am wondering if instead of using "ip route 0.0.0.0 0.0.0.0 Cellular0/0/0 10", I could just do "ip route 0.0.0.0 0.0.0.0 10.64.64.64 10" ?? Well, I am not even sure that is the problem. PS: Don't worry about the passwords. They are already obfuscated. Here is my whole config: Current configuration : 4601 bytes ! version 12.4 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname C1841-FOOBAR ! boot-start-marker boot-end-marker ! enable secret 5 $1$S.xxxxxxxxxxxxxxxxxxxxxxxxxxx ! no aaa new-model dot11 syslog ip cef ! ! no ip dhcp use vrf connected ip dhcp excluded-address 192.168.0.1 192.168.0.10 ip dhcp excluded-address 192.168.0.210 192.168.0.254 ! ip dhcp pool FOOBAR network 192.168.0.0 255.255.255.0 netbios-name-server 192.168.0.2 domain-name FOOBAR.local default-router 192.168.0.1 dns-server 196.201.225.18 196.201.225.19 lease 0 2 ! ! ip domain name FOOBAR.local ip name-server 196.201.225.18 ip name-server 196.201.225.19 ip name-server 41.222.10.26 ! multilink bundle-name authenticated chat-script gsm "" "ATDT*99#" TIMEOUT 30 CONNECT ! ! ! ! username admin privilege 15 secret 5 $1$k8ao$InezrCcTAPQKNh1iVPhJH. username tech0 privilege 15 secret 5 $1$z0I3$ynm.qXVzt57atF1OZDSdG1 archive log config hidekeys ! ! ! ! ip ssh version 2 ! ! ! interface FastEthernet0/0 description lan ip address 192.168.40.250 255.255.255.0 no ip proxy-arp ip nat inside ip virtual-reassembly no ip route-cache cef no ip route-cache shutdown duplex auto speed auto no cdp enable ! interface FastEthernet0/1 description WAN - 2/2Mbps to JTL ip address NN.NN.NN.NN 255.255.255.252 ip nat outside ip virtual-reassembly shutdown duplex auto speed auto ! interface Cellular0/0/0 description 3G Internet with Safaricom ip address negotiated ip nat outside ip virtual-reassembly encapsulation ppp dialer in-band dialer idle-timeout 0 dialer string gsm dialer-group 1 async mode interactive ppp chap hostname saf ppp chap password 7 0000121205 ppp ipcp dns request ppp ipcp route default ! ip forward-protocol nd ip route 0.0.0.0 0.0.0.0 JTL-GW-IP ip route 0.0.0.0 0.0.0.0 Cellular0/0/0 10 ! ! no ip http server no ip http secure-server ip nat inside source route-map JTL interface FastEthernet0/1 overload ip nat inside source route-map SAFCOM interface Cellular0/0/0 overload ip nat inside source static tcp 192.168.0.2 1234 NN.NN.NN.NN 1234 extendable ip nat inside source static tcp 192.168.0.2 3389 NN.NN.NN.NN 3389 extendable ip nat inside source static tcp 192.168.0.2 8081 NN.NN.NN.NN 8081 extendable ip nat inside source static tcp 192.168.0.2 8082 NN.NN.NN.NN 8082 extendable ip nat inside source static tcp 192.168.0.2 8083 NN.NN.NN.NN 8083 extendable ! ip access-list extended netbios deny tcp any any eq 135 deny tcp any any eq 137 deny udp any any eq netbios-ss deny tcp any any eq 139 deny tcp any any eq 445 deny udp any any eq 445 deny udp any any eq 135 deny tcp any any eq 136 deny udp any any eq 136 deny udp any any eq netbios-ns deny tcp any any eq 138 deny udp any any eq netbios-dgm permit ip any any ! access-list 102 permit ip 192.168.0.0 0.0.0.255 any dialer-list 1 protocol ip list 1 ! ! route-map SAFCOM permit 10 match ip address 102 match interface Cellular0/0/0 ! route-map JTL permit 10 match ip address 102 match interface FastEthernet0/1 ! ! ! control-plane ! banner login ^C ******************************************************* ^C ! line con 0 logging synchronous login local line aux 0 line 0/0/0 exec-timeout 0 0 script dialer gsm login local modem InOut no exec transport preferred none transport output none line vty 0 4 password 7 005C4B32165A0510076523 login local transport input telnet ssh ! scheduler allocate 20000 1000 end -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."

3 3

UTMs Recommendations
by Odhiambo Washington 13 Dec '13

13 Dec '13

Hi Skunks, So I have been looking at UTM devices/options for the last three days. I have come across this document - http://goo.gl/8TojIt, but I still have to ask you to chip in with your practical experience. The only luxury I've had is that Cyberoam have web-based simulators for their products and so I was able to practically play with some of them. Actually, looks like they have just three products in the UTM category - albeit with different network throughput. The primary requirement I have for now is to be able to control where users (yes, I need to create user accounts and authenticate them) can go to the Internet, and possibly limit this with Time/Bandwidth (allocate data bundles) ACLs. Of course the other 'Ts' in the UTM still hold. Cyberoam appears to do this. What I lack is the comparison with other products - Cisco, Astaro, etc Essentially, whatever product I need should meet the above requirement besides being a UTM, and should be able to work in bridge mode with a Cisco router. The network layout is JTL Fiber <----(bridge)-- Cisco <--- LAN. The UTM device should plugin behind the Cisco and function transparently. Cost is a factor. The equivalent Cyberoam unit for this purpose costs USD 1,100 with an annual subscription for updates costing about USD 500-600 per year ... I know I could build my own UTM, but I do not want to do it for now so please don't suggest that path:-) I am open to suggestions/ideas/experiences. You could simply tell me what device you use, what it costs, and whether it meets the above requirements. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."

6 5

help me understand an open ssl error
by Eva Kimathi 13 Dec '13

13 Dec '13

ola! I have this error that I am having a problem deciphering. please help /etc/pki/CA/index.txt: No such file or directory unable to open '/etc/pki/CA/index.txt' 139879468582752:error:02001002:system library:fopen:No such file or directory:bss_file.c:398:fopen('/etc/pki/CA/index.txt','r') 139879468582752:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400: Testing certificate for hmis_server.{MY_DOMAIN}. Error opening certificate file /etc/ssl/certs/hmis_server.ghealth.crt.pem 139872843011936:error:02001002:system library:fopen:No such file or directory:bss_file.c:398:fopen('/etc/ssl/certs/hmis_server.ghealth.crt.pem','r') 139872843011936:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:400: unable to load certificate here's the script that created that monster #!/bin/csh -f echo "Creating a certificate signing request (CSR)." openssl req \ -nodes -new -days 3650 \ -subj "${DEFAULT_ATTRIBUTES}/CN=${SERVER_NAME}.${MY_DOMAIN}" \ -keyout /etc/ssl/private/${SERVER_NAME}.${MY_DOMAIN}.key.pem \ -out /etc/ssl/req/${SERVER_NAME}.${MY_DOMAIN}.req.pem echo "Testing the newly created CSR." openssl req -text -verify -noout -in /etc/ssl/req/${SERVER_NAME}.${MY_DOMAIN}.req.pem echo "Check for errors, press [Enter] to continue..." read x echo "Signing CSR for ${SERVER_NAME}.${MY_DOMAIN}." openssl ca \ -out /etc/ssl/certs/${SERVER_NAME}.${MY_DOMAIN}.crt.pem \ -in /etc/ssl/req/${SERVER_NAME}.${MY_DOMAIN}.req.pem \ -cert /etc/ssl/cacerts/ca.${MY_DOMAIN}.cacrt.pem \ -keyfile /etc/ssl/private/ca.${MY_DOMAIN}.cakey.pem echo "Testing certificate for ${SERVER_NAME}.${MY_DOMAIN}." openssl verify \ -CAfile /etc/ssl/cacerts/ca.${MY_DOMAIN}.cacrt.pem \ /etc/ssl/certs/${SERVER_NAME}.${MY_DOMAIN}.crt.pem echo "Check for errors, press [Enter] to continue..." read x echo "Creating bundle for ${SERVER_NAME}.${MY_DOMAIN}." cat /etc/ssl/private/${SERVER_NAME}.${MY_DOMAIN}.key.pem \ /etc/ssl/certs/${SERVER_NAME}.${MY_DOMAIN}.crt.pem \ > /etc/ssl/private/${SERVER_NAME}.${MY_DOMAIN}.key+crt.pem echo "Creating DH parameter file for ${SERVER_NAME}.${MY_DOMAIN}." openssl dhparam -check -text -5 512 -out /etc/ssl/dh/${SERVER_NAME}.${MY_DOMAIN}.dh ------------------- help? -- __________________________________________________________________________ Out of clutter, find simplicity. From discord, find harmony. In the middle of difficulty, lies opportunity ~Albert Einstein Eva Kimathi

2 3

Linux SMS Gateways
by jeremy sinja 13 Dec '13

13 Dec '13

Hallo Skunks. I am working on an sms system on the Linux Platform. Anyone here who has tried either gnokii or kannel gateways, kindly advice which one is better. Kind Regards

7 14

Internet access(home)
by maina 13 Dec '13

13 Dec '13

Get in touch off-list with quotes for the said. -- David Maina. NAIROBI, KENYA.. Cell:+254-721-950073. Registered Linux User #407239. Registered Ubuntu User #35129. ---------------------------------------------------------------------- "By golly, I'm beginning to think Linux really *is* the best thing since sliced bread."

1 0

Best programming jokes
by Ken Muturi 12 Dec '13

12 Dec '13

Jesus and Satan have an argument as to who is the better programmer. This goes on for a few hours until they come to an agreement to hold a contest with God as the judge. They set themselves before their computers and begin. They type furiously, lines of code streaming up the screen, for several hours straight. Seconds before the end of the competition, a bolt of lightning strikes, taking out the electricity. Moments later, the power is restored, and God announces that the contest is over. He asks Satan to show his work. Visibly upset, Satan cries and says, “I have nothing. I lost it all when the power went out.” “Very well,” says God, “let us see if Jesus has fared any better.” Jesus presses a key, and the screen comes to life in vivid display, the voices of an angelic choir pour forth from the speakers. Satan is astonished. He stutters, “B-b-but how?! I lost everything, yet Jesus’ program is intact! How did he do it?” God chuckles, “Everybody knows… Jesus saves.

5 5

Safaricom 3G routing
by Odhiambo Washington 12 Dec '13

12 Dec '13

I have this weird feeling Safaricom have seriously screwed up their routing configuration - especially with 3G that I use. I can try and show support details tmrw, but this has been happening, perhaps since 8th Dec! -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."

14 20

URGENT PS ENGINEERS WANTED
by Memusi 11 Dec '13

11 Dec '13

Need a few PS engineers to be interview today.Drop me CV. Huawei knowledge,Core Networks,SS7,EPC,GUL.Cisco certifcations advantage, Degree:Telecoms related. Deadline 1200hrs -- Regards Memusi Communication is vital in this century....

3 3